Questions tagged [microsoft-forefront-2010]
Forefront is Microsoft's umbrella brand for Security, Identity and Access Management products. Note: Questions tagged *Forefront* should usually be tagged as something more specific.
62
questions
1
vote
0answers
137 views
Forefront 2010 (TMG): infinite redirection loop
The behaviour of the internal web server is to detect an incoming request over HTTP and respond with a 301 response to a HTTPS location (for all or only specific URLs), then TMG interferes and the ...
0
votes
2answers
175 views
Sites must use TMG as default Gateway
Last week our Hyper-V server crashed and forced us to rebuild most of our network. While the network has been rebuilt we are having a major problem. We use Forefront TMG to route our web traffic using ...
0
votes
1answer
27 views
Forefront 2010 does not let logins using 'Public or Shared Computer'
I have recently inherited a Forefront TMG 2010 server, and when people try to login and select 'This is a public or shared computer' they are unable to login. No errors, just reloads the same page.
...
0
votes
0answers
467 views
How to create user in AD using FIM 2010 Sync Service Only?
I am new to FIM 2010 R2(MIM 2016). I want to create user in AD from my DB. I have DB that contains student information and based on that I want to create user in AD.
I want to perform this action ...
0
votes
1answer
371 views
Remembering homeMDB & msExchHomeServerName when disabling for later reconnecting
My environment requires me to be able to create Exchange mailboxes on
existing users, disable those mailboxes and then, some time later,
re-enable them and have Exchange reconnect them automatically ...
0
votes
1answer
351 views
FIM2010 R2 SP1 service account requirements on database after installation
We're in the process of updating our Forefront Identity Manager to 2010 R2 SP1. The SQL Server instance for the old installation has the FIM service account in the sysadmin role, as is required for ...
1
vote
0answers
91 views
Can end user using Forefront Identity Manager to leave security group?
In our company, users logon their desktop with AD and access Sharepoint using Windows authentication. Our users frequency changing teams. After they changed team, their access to old Sharepoint team ...
1
vote
0answers
66 views
Manage UAG Server via WinRM
Does anyone know of there is a way to configure a UAG server to work with WinRM? We have a small number of servers and the "Server Manager" application as well as PowerShell are the way we generally ...
0
votes
1answer
42 views
UAG 2010 and Exchange 2010 Service Pack installs
We are currently on Exchange 2010 SP2 and UAG 2010 SP1. I want to upgrade Exchange to SP3, and later on UAG to SP4, but not all at the same time due to scheduling. Ideally we'd like to do Exchange ...
2
votes
0answers
350 views
Forefront UAG with SSL/X509 auth for REST API
I'm not a network engeneer, but a software engeneer, so this theme is quite unfamiliar for me. We develop a solution, that consists of a server-side web application (with a rest api), working on java ...
0
votes
1answer
55 views
Single sign-on between two UAG servers
The situation:
site1.company.com is published in UAG 1 (Datacenter 1)
site2.company.com is published in UAG 2 (Datacenter 2)
My question:
Is it at all possible to set up a single sign on between ...
0
votes
1answer
1k views
Forefront TMG is Stop Internet after few min after enabling HTTPS Inspection
Forefront TMG is Stop Internet after few min after enabling HTTPS Inspection,
specialty I am enable to block other https websites but gmail is not blocking
till i enable https inspection & if i ...
1
vote
0answers
35 views
Can Forefront TMG server as an outbound chacheing solution to a web farm
We are to deploy several web servers in a datacenters. All running Windows 2K12 + IIS.
I am not very familiar with data center best practices for deploying and maintaining web servers.
In the office ...
1
vote
1answer
210 views
To expose MS CRM to the internet: Should we use IFD or something like Forefront UAG?
In our company we plan to expose our MS CRM 2011 system to the internet to make it easier to access from the outside.
As far as I can see there are basically 2 alternatives:
Make an Internet Facing ...
3
votes
1answer
4k views
Why does the clipboard not work with RDP through Microsoft's Unified Access Gateway (UAG)?
This one is really driving me nuts...
For one of our customers, we are allowed access using the Microsoft Unified Access Gateway, which provides an HTTPS-tunneled way to (among other things) run ...
1
vote
1answer
632 views
FIM CM Broken After Manual Cert Renewal
I recently attempted to renew the certificate for the clmAgent user account according to these directions:
http://technet.microsoft.com/en-us/library/hh149034%28v=ws.10%29.aspx
I logged in with the ...
1
vote
0answers
142 views
SCCM 2007 + FEP 2010 deployment - when can I upgrade sql server?
I am in the process of migrating our forefront client security installation on the domain over to a forefront endpoint protection based on system center configuration manager 2007 platform.
I have ...
1
vote
1answer
746 views
Is there a way to get more detailed logging out of Forefront TMG 2010
I am troubleshooting VPN connectivity issues with Forefront TMG. Everything looks correct in configuration but the packets are blocked regardless.
The logs are not very descriptive. I see:
Denied ...
1
vote
1answer
268 views
SCCM migration to SCCM 2012
I am trying to plan a migration from SCCM 2007 to SCCM 2012. I am unable to find if I can migrate the Forefront from SCCM 2007 in SCCM 2012, or if I will have to uninstall all agents and install new ...
4
votes
5answers
13k views
How do I find the WSUS server that my computers are connecting to for Windows Updates?
I have multiple WSUS servers setup on our domain; one is handling Windows Updates, while another is setup to only do Endpoint Protection updates (via SCCM 2012). Endpoint Updates are working properly ...
0
votes
1answer
263 views
UAG Direct Access 2 node Array wipes the IIS web site for NLS that is configured on the same box when DA is Activated
any help would be awesome, I have created a two node UAG Direct Access array, although not best practice I have setup NLS website on the UAG DA servers. Every time I click Activate on the Forefront ...
1
vote
1answer
97 views
Forefront Identity Manager 2010 no users
I've been scratching my head for a day or so trying to learn FIM.
I attempted to walk through this tutorial which is one of the things I want to use it for - but I couldn't get it to work (users don'...
3
votes
3answers
2k views
Forefront UAG vs. Server 2012 Direct Access
So I'm working on bringing my company into the 21'st century, with virtual servers, active directory, ADFS, SSO etc. Its a huuuuge project, with a future goal of ISO 27001 cerification.
The current ...
1
vote
0answers
148 views
Installing VirtualBox disables Forefront
I have a Lenovo ThinkPad T520, less than a year old, running Windows 7 Ultimate.
After I install VirtualBox (it has happened with several versions), Forefront Endpoint Protection 2010 no longer ...
1
vote
1answer
1k views
Syntax for file and process exclusions in Forefront Endpoint Protection?
I can't seem to find an official and up-to-date documentation on how to set up file and process exclusions in Forefront Endpoint Protection 2012.
For file types, which of these will work? Are they ...
2
votes
1answer
5k views
Does Microsoft TMG 2010 handle websockets, at least through SSL?
I thought in my own insanity that if I published an IIS 8 web server with websockets through HTTPS there shouldn't be a problem even with the TMG.
However, regardless of publishing, filtering and ...
0
votes
2answers
5k views
Forefront TMG 2010 RDP Connections without non-standard ports
From my reading, it looks like the Forefront TMG will not allow the passing of RDP connections through the firewall without configuring a non-standard port for each IP address of the internal servers ...
1
vote
1answer
204 views
How to stop UAG authenticating requests via LDAP
I want UAG to not authenticate ActiveSync requests before passing them on. I can see that at the moment the requests aren't being passed through because UAG checks with LDAP, which says that the user ...
-2
votes
3answers
911 views
TMG: Allowed user groups and weird group names
I am trying to setup a basic PPTP VPN connection using Forefront TMG 2010.
Whenever I try to connect to the VPN connection from my Windows 7 machine, I get an error related to unauthorized access.
So ...
1
vote
1answer
174 views
Will Forefront 2010 Antispam/Antivirus protection work on all-in-one Exchange 2010 servers in DAG
We have 2 Exchange 2010 servers with every single role on each. Servers are in DAG mode and they have TMG 2010 as entry point and doing as load balancer. Can I install Forefront 2010 on both Exchange ...
0
votes
1answer
2k views
Disable Forefront Endpoint Protection 2010 Desktop Alerts
Is it possible to disable desktop alerts for FEP 2010, without disabling realtime protection?
I.e., the notification that pops up that says:
We want to maintain realtime protection, neutralise ...
0
votes
1answer
272 views
Book for Forefront Identity Manager 2010 [closed]
I can't believe it but I am not able to find a book for Forefront Identity Manager 2010.
I am looking for a Administrator's Guide or something like that.
Any suggestions?
1
vote
1answer
2k views
Exchange 2010 and FPE Content Filtering
I have a box running Server 2008 R2, Exchange 2010 SP1, and Forefront Protection for Exchange 2010.
The issue is that I cannot for the life of me get my content filters to quarantine a single message ...
0
votes
1answer
2k views
Sporadic HTTP 408 response on pages behind MS Forefront TMG 2010
I'm getting sporadic HTTP 408 responses when I try to load pages from my site.
The network is set up with Forefront acting as a proxy in front of the web server. When I first load the page, it comes ...
3
votes
1answer
594 views
Issues with Forefront for Exchange file filter
I have an issue where I want to strip some image attachments from emails.
Using Forefront for Exchange I can create a file filter rule based on attachment name, type, and size. This initially seemed ...
1
vote
0answers
814 views
How do I add a new full admin account to SCCM 2007?
I want to install Forefront Endpoint Protection on my SCCM server using a new service account that I just created specifically for this purpose. I'll be using a separate reporting database so I'll ...
0
votes
2answers
473 views
Forefront TMG - segregate authenticated traffic
I am running Forefront TMG SP1 rollup 3. All desktop clients will have the Firewall Client installed. Servers will not.
I would like to segregate my outbound network traffic according to traffic ...
1
vote
5answers
552 views
Cisco 2811 to Forefront - stop broadcast traffic
I recently upgraded from an old ISA to a Forefront box. I'm now receiving a ton of 0xc0040050 errors. The vast majority are to an internal broadcast address - 100.100.100.255. This is a legacy subnet ...
0
votes
2answers
369 views
Forefront TMG page denied display
Forefront TMG - URL categorization reason not displays although it should be for denied pages.
I have tried all the available checkboxes on the Forefront rule regarding the message displayed with no ...
1
vote
2answers
729 views
Remove one's domain from general spam blacklist
We've a problem similar to the question Getting a domain name off of the blacklist but the solutions posted there doesn't help.
The problem I'm facing is that our domain is probably marked ...
4
votes
1answer
4k views
Forefront Protection for Exchange - Allowed sender still delivered to Junk Mail
I've got a fresh install of Server 2008 R2 SP1, Exchange 2010 SP1, and Forefront 2010 Protection for Exchange. All on the same box, Exchange is CAS/Hub/MBS. This is a testing box, looking to evaluate ...
0
votes
1answer
708 views
ForeFront TMG 2010 - Topology Question
Total 4 NICs
NIC1 - LAN interface
NIC2 - WAN 1 (ISP - A)
NIC3 - WAN 2 (ISP - B)
NIC4 - DMZ (ISP - C with Public IP Pool)
Hi All,
3 ISP Connections
2 For Internet use (Local LAN Internet Access – ...
1
vote
1answer
3k views
UAG Direct Access - Exporting GPO to offline hosts
I'm probably missing something here, but I couldn't find any reference to this.
I have a host that is using Direct Access from a remote location. We had to make changes on the server side and ofc, ...
2
votes
1answer
3k views
General Forefront TMG 2010 network / proxy configuration
We have decided to test and then deploy a Forefront TMG server on our network of 50 - 75 users (Windows 7, XP Clients, Windows Server 2008R2 Servers and a few Linux Boxes)
Our Network Topology is :
...
1
vote
2answers
2k views
SCCM 2007 not installing Forefront Endpoint Protection client
We've recently upgraded from Forefront Endpoint Protection 2007 to 2010 and it now needs SCCM to deploy the clients, so we are using SCCM for the first time and struggling a little bit.
SCCM is fully ...
2
votes
2answers
227 views
How to configure a windows phone 7 to access website behind Forefront Threat Management Gateway
As in the title.
We have a WCF service, and a Windows Phone 7 client. One of our customers wants to install the service behind a TMG server.
I know that TMG is an update to the old ISA server and I ...
1
vote
0answers
400 views
Scan a NAS Device with Microsoft Forefront Endpoint Protection
We are having problems with viruses sneaking through our virus scanner and onto our NAS and I want to scan the whole NAS. If I attempt to run a scan on the whole drive using the GUI for Forefront ...
2
votes
3answers
1k views
Does MS Forefront TMG cache authentication?
I'm testing a client machine that makes requests to a biztalk server using a forefront machine as a web proxy. Upon first test I put in an invalid name/password into the receive port and received the ...
2
votes
1answer
6k views
Unable to join the domain?
I am having difficulties in joining my Windows Server to the domain, may I know what could be the problem ?
I suspect that there is a firewall in between this DR internal site and the DMZ where this ...
1
vote
1answer
1k views
Redundancy and Automated failover using Forefront TMG 2010 Standard between Production-DR site?
I'm using MS TMG 2010 Standard as my single firewall to publish my Exchange Server and IIS website to the internet, however it is just one VM in the DMZ network with just one network card (vNIC), what ...
